INTRODUCING

 

COFFEE HACKING:

INSTANT BREWAGE RELEASE EXECUTION

Dump MiZip

4 Bytes ID

check Byte

SAK & ATQ_1

Sector 0

Bloc 0

Sector 1

Sector 2

Sector 3

Sector 4

Bloc 1

Bloc 2

KeyA

KeyB

ACs

Bloc 3

The holy Grail 

01 C0 = 4.48€

"Checksum" : 01 ^ C0

Bloc selection :

AA -> bloc 0

55 -> bloc 1

Counter

The holy Grail 

13.37 €

0x 05 39

0x 3C

Checksum

Dump analysis

D1

D2

D1 XOR D2

Dump analysis

D1 XOR D2

Keys generation

Keys generation

Master Keys

n Sn
1 09 12 5a 25 89 e5
2 ab 75 c9 37 92 2f
3 e2 72 41 af 2c 09
4 31 7a b7 2f 44 90
n Tn
1 f1 2c 84 53 d8 21
2 73 e7 99 fe 32 41
3 aa 4d 13 76 56 ae
4 b0 13 27 27 2d fd

Fake 

UID : DE AD BE EF

Fake 

FAIL 

Change 1 Byte of Sector 2 KeyB 

Coffee machine can't write money sector 

Coffee machine print the money of the previous yellow-key

DEMO

Made with Slides.com